Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
File: 3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier: saSygI4yNh9u/tyhLMZhjRZ5bedBHGySRHUrcW8ZLPM=
Subject key identifier: 5E:83:E6:E2:2A:55:3F:FA:6E:E1:ED:AA:E7:A4:F5:32:49:90:4D:5C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4DC48B5595E56D2CB97C7D96F974C766502E1522
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
Signing time: Fri 22 Aug 2025 14:47:14 +0000
ROA not before: Fri 22 Aug 2025 14:42:14 +0000
ROA not after: Fri 21 Aug 2026 14:47:14 +0000
asID: 206804
IP address blocks: 185.221.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 17:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c4:8b:55:95:e5:6d:2c:b9:7c:7d:96:f9:74:c7:66:50:2e:15:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:14 2025 GMT
Not After : Aug 21 14:47:14 2026 GMT
Subject: CN=5E83E6E22A553FFA6EE1EDAAE7A4F53249904D5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f4:07:4e:e5:f8:0a:5f:cf:25:e9:6e:b9:1e:
81:75:f3:a5:04:36:c5:20:7a:a9:6d:b1:8c:ee:e8:
b7:0b:7a:cc:41:ff:a8:2d:8f:06:93:c0:48:d6:b6:
5c:95:bb:06:77:6d:d6:12:3e:ff:c1:38:c0:46:73:
14:90:7a:9b:af:94:33:b9:ff:00:02:80:84:43:6c:
ac:bc:8e:c7:0c:74:81:bd:ea:39:00:3a:d3:46:2f:
99:12:1c:74:98:e0:28:02:88:a2:53:a9:6b:fd:3a:
b5:0b:c6:66:e9:e2:34:10:0c:72:e8:00:6c:08:4b:
98:95:ee:a0:e1:87:25:2a:20:9c:5f:8c:b2:d6:19:
9e:b4:7a:eb:a7:0e:2f:31:0b:93:5b:cb:01:5a:a0:
03:11:68:98:34:f3:bc:7f:8e:07:f2:7b:59:46:67:
9b:44:c8:26:62:bc:e3:03:d7:65:61:5f:e6:35:f9:
63:8d:42:ac:21:40:84:30:dc:06:81:33:62:f9:ee:
3c:3d:b8:64:3d:07:44:a0:21:a1:6b:fc:91:08:a5:
f4:3e:32:2a:61:7f:b4:84:ba:61:4e:1c:f9:64:0c:
69:8b:ec:fb:52:13:62:53:99:ec:cb:63:42:3b:0c:
5e:b1:50:07:b6:f2:ba:2a:d9:5e:3b:e1:b3:de:54:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:83:E6:E2:2A:55:3F:FA:6E:E1:ED:AA:E7:A4:F5:32:49:90:4D:5C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.132.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e7:82:9c:89:33:4e:7a:6c:5a:27:df:ad:6a:64:59:b1:a4:
54:1d:d7:33:e5:ab:50:86:1f:49:8c:b3:a8:b4:89:76:86:5f:
9c:3c:c8:17:4e:c1:a7:68:13:e4:32:46:56:18:98:fb:a6:dc:
df:4e:27:4a:25:aa:70:c8:00:38:54:62:ee:95:ff:db:3a:4a:
34:01:f1:8e:fc:60:b7:94:6c:4f:c9:64:e2:fc:56:74:c2:41:
1e:39:f6:23:f2:86:92:65:7d:05:59:24:c6:f6:fa:00:43:11:
38:e3:7f:9d:22:51:58:84:16:3a:59:e0:63:6c:be:41:2c:9b:
67:a4:ea:cb:9e:28:92:19:68:1c:4f:30:8a:3f:6a:6d:cb:a8:
86:2a:db:da:46:77:33:15:e0:da:12:1a:be:fc:51:6c:58:7c:
35:e0:8c:7e:6b:6e:d5:45:a8:16:03:80:19:a5:f2:83:7d:6b:
0d:4f:67:f9:b4:a1:66:64:a7:4d:a4:e0:bc:ab:73:c4:fe:7e:
ed:d7:1a:ad:51:f4:23:a0:8b:8d:88:12:fa:e0:9d:1f:56:d9:
88:61:69:40:cc:11:7f:17:b6:e9:8b:59:13:3c:33:da:e6:f0:
d5:b0:9f:3e:a6:92:99:73:08:28:d8:4b:bb:81:a1:11:48:92:
f5:cd:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:22:03 2025 by rpki-client